General
- Target 3a3333abf3351a3ddf01b69d19ac283ba8262e467feb0b73d2b8429f9ff0f492
- Size 128KB
- Sample241107-e84zrswblc
- SHA256 3a3333abf3351a3ddf01b69d19ac283ba8262e467feb0b73d2b8429f9ff0f492
- MD5 2549ef5a830133b985a067fe29ecd741
- SHA1 073f661a24bbf1ce6485ed50b3064d482734cf16
- SHA512 e82b1b4cc9ea93f65ab93aa5d0176db95f908014f279511e6a80b8da368d4e309aaedef0df11438d6c536a23865389042c45576ef32110ac96bb92d3d6211486
- SSDEEP 3072:YXrhLJDif6HvPe5/FV8H7VuR61wsDrEJ6uTrpmI3Fhz074VzONJ8q:YXrhLwfy+tu7wR68Xp7jz4P8q
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
fd30998521058cd6003f00fbc622a6d0dac2515ed498cce69e007e11eaab5a3b.exe
Resource
win7-20240729-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
fd30998521058cd6003f00fbc622a6d0dac2515ed498cce69e007e11eaab5a3b.exe
Resource
win10v2004-20241007-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
24.01
C2
-
37.220.86.164:29170
Attributes
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Targets
-
- Target fd30998521058cd6003f00fbc622a6d0dac2515ed498cce69e007e11eaab5a3b.exe
- Size 337KB
- SHA256 fd30998521058cd6003f00fbc622a6d0dac2515ed498cce69e007e11eaab5a3b
- MD5 a01bf8e70df5e9874b6655b9f987401a
- SHA1 b9a9c7bb4562e8e0871b6a2322f8def50a1490f9
- SHA512 6876eef458436227ad637f74287d153216c4df6e755ced6069fbd51c6277d8767b39259735004904712ce9704f2a0f7984c93c672609fc35864535ae1bce6c3a
- SSDEEP 6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Redline family